CVE-2022-42098

KLiK-SocialMediaWebsite versión v1.0.1 Explicación de la vulnerabilidad: KLiK-SocialMediaWebsite v1.0.1 tiene vulnerabilidades de inyección SQL en profile.php en el parámetro id. Vectores de ataque: KLiK-SocialMediaWebsite v1.0.1 Una vez que se ha creado un usuario, también se pueden encontrar...

QCube Cross-Site-Scripting

A reflected cross-site scripting vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. id: CVE-2020-24912 info: name: QCube Cross-Site-Scripting author: pikpikcu severity: medium...

CVE-2022-28986

CVE-2022-28986 A Insecure direct object references IDOR vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor Vulnerability Details Risk : Critical Vendor: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Disclosed by: Flaviu Popescu Description: Insecure direct object...

CVE-2020-24913-PoC

CVE-2020-24913-PoC A Poc for CVE-2020-24913, a SQL injection vulnerability in qcubed all versions including 3.1.1 in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request. This PoC is performed using a MyS...

CVE-2025-25965

CVE-2025-25965: Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.2 Introduction Cross-Site Request Forgery CSRF remains one of the most overlooked yet dangerous vulnerabilities affecting web applications today. CVE-2025-25965 is a newly discovered CSRF vulnerability in the...

CVE-2020-24913-exploit

qcubed-exploit Necesitas tener Bun instalado: https://bun.sh Para instalar las dependencias: root@kitploit: bun install Para ejecutar: root@kitploit: mostrar ayuda bun run exploit -h probar si es vulnerable bun run exploit vulnerable -u https://site.com/framework/assets/core/php/profile.php crear...

CVE-2021-24545

CVE-2021-24545 This is an XSS vulnerability discovered in a plugin that is no longer distributed as a plugin. WordPress Plugin HTML Author Bio description XSS This vulnerability is caused by improper validation of the description parameter in /wp-admin/profile.php. A remote attacker can exploit...

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - Aviso 15 - 00/00/06 Programa: phpBB 2.0.15 Página principal: http://www.phpbb.com Versiones vulnerables: phpBB 2.0.15 y versiones anteriores Riesgo: ¡¡Alto riesgo!! Impacto: Múltiples vulnerabilidades DoS. Descripción phpBB es un paquete de foros de código abierto de alto...

CVE-2025-7605

CVE-2025-7605 code-projects AVL Rooms Project V1.0/profile.php Inyección SQL NOMBRE DEL PRODUCTOS AFECTADOS AVL Rooms Página web del vendedor https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ Remitente dazhi Archivo vulnerable /profile.php VERSIÓNES V1.0 Enlace de...

EUVD-2026-72175

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been...

CVE-2026-86226

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been...

CVE-2026-86226

Projectwolds Online Attendance System 1.0 contains a cross-site scripting (XSS) vulnerability in the file profile.php , triggered by manipulation of the email argument. The flaw allows a remote attacker with low privileges to inject scripts if a user interacts with the crafted request. The CVSS 3...

CVE-2026-86226 Projectwolds Online Attendance System profile.php cross site scripting

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been...

PT-2026-86573

Name of the Vulnerable Software and Affected Versions Projectwolds Online Attendance System version 1.0 Description A remote cross-site scripting issue exists in the profile.php file. The flaw allows for the manipulation of the email variable to execute malicious scripts in the context of the...

CVE-2026-82482

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.php of the component editprofile Endpoint. The manipulation of the argument Biography leads to cross site scripting. The attack can be...

CVE-2026-82482 coppermine-gallery Coppermine Photo Gallery edit_profile Endpoint profile.php cross site scripting

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.php of the component editprofile Endpoint. The manipulation of the argument Biography leads to cross site scripting. The attack can be...

CVE-2026-82482

Coppermine Photo Gallery (coppermine-gallery/cpg1.6.x) versions up to 1.6.28 contain a stored cross-site scripting (XSS) vulnerability in the edit_profile endpoint of profile.php. The root cause is improper input handling of the Biography argument, allowing a remote authenticated user to inject s...

EUVD-2026-68161

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.php of the component editprofile Endpoint. The manipulation of the argument Biography leads to cross site scripting. The attack can be...

CVE-2026-82482 coppermine-gallery Coppermine Photo Gallery edit_profile Endpoint profile.php cross site scripting

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.php of the component editprofile Endpoint. The manipulation of the argument Biography leads to cross site scripting. The attack can be...

PT-2026-83529

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.php of the component edit profile Endpoint. The manipulation of the argument Biography leads to cross site scripting. The attack can be...